Analysis
- max time kernel
117s - max time network
118s - platform
windows7_x64 - resource
win7-20240903-en - resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system - submitted
08/11/2024, 01:53
Behavioral task
behavioral1
Sample
69d7e85ed9e8798f2276c9b2bdd85db1926f2c05156ae5634411c253168b5a3bN.exe
Resource
win7-20240903-en
2 signatures
120 seconds
General
- Target 69d7e85ed9e8798f2276c9b2bdd85db1926f2c05156ae5634411c253168b5a3bN.exe
- Size 83KB
- Sample241108-cbc4ns1rcx
- SHA256 69d7e85ed9e8798f2276c9b2bdd85db1926f2c05156ae5634411c253168b5a3b
- MD5 08544a8e51726bc85e3f73da1cee4950
- SHA1 d64ad50ba7d2c6dfa26cb56efa9566eeb44cf234
- SHA512 57be7a5fd86dddb8eb8d803e0c4cba2cb18eee83b20a0372394d528ec2843267ee1ea7d8fec2d3889a26029de6b026c9040e66da143dcbe78684e1202bc9f966
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+BK:LJ0TAz6Mte4A+aaZx8EnCGVuB
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/2088-0-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/2088-1-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/2088-7-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/files/0x0005000000004ed7-11.dat upx behavioral1/memory/2088-14-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/2088-22-0x0000000000400000-0x000000000042A000-memory.dmp upx - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 69d7e85ed9e8798f2276c9b2bdd85db1926f2c05156ae5634411c253168b5a3bN.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\rifaien2-vQsScddKDwHnibeC.exe
- Size 83KB
- SHA256 f3edf72527afc34ac7ce89bfd481662b95b6d898aabe9d717b55b5615290e718
- MD5 0acafa3183df0ddb8f38548ebc741df1
- SHA1 8f373a80a41932c60f2a4695befc720d9f1ac4fd
- SHA512 f08ade61a75ea51a74cb0092a51f6129f01a61a7842f50ad9f08cca6664a19488944d7a5eefe05635828c953d2ad1f2814eb184f2801dd76e32f655d8b811b7e
- SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+aK:LJ0TAz6Mte4A+aaZx8EnCGVua
- MD5 SHA1 SHA512 SSDEEP